Skip to contentRed Hat Openshift Container Platform 4.13 vulnerabilities
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-controller-manager: elevated build pods can lead to node compromise in openshiftCVE-2024-45496Fix available9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyCVE-2024-73879.1 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-console: oauth2 insufficient state parameter entropyCVE-2024-65088.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Fix available7.5 High
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassedCVE-2024-50377.5 High
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on hostCVE-2024-5154Fix available8.1 High
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- red hat openshift container platform 3.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreCri-o: arbitrary command injection via pod annotationCVE-2024-3154Fix available7.2 High
- red hat advanced cluster management for kubernetes 2, openshift container platform 3.11, openshift container platform 4.12 +3 more +5 moreCluster-monitoring-operator: credentials leakCVE-2024-11397.7 High
- red hat logging subsystem for red hat openshift, advanced cluster management for kubernetes 2, openshift container platform 4.13 +3 more +5 moreCoredns: cd bit response is cached and served laterCVE-2024-0874Fix available5.3 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 moreKubevirt-csi: persistentvolume allows access to hcp's root nodeCVE-2024-1725Fix available6.5 Medium
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv2CVE-2023-6476Fix available6.5 Medium
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labelsCVE-2023-5408Fix available7.2 High
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High